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Section  A.  Project  Schedule 

The  Year  2  timeline  below  identifies  the  high  level  SeaKey  tasks  and  their  durations. 

T  I  I  I  I  I  I  I  I  I  f 

I  I  I  I  I  I 

Task  3  -  Design  Implementation 

I  I  l  I  I  I  I  I  l  I  I  I  l 

I  I  l  I  I  I  I  I  I  I  I  I  l 

I  I  I  I  I  I  l  l  l  I  I  l  l 

I  I  I  I  I  I  I  Task  4  -  Calculate  realistic  key  rates 

I  I  I  I  I  I  i  — i - 1 - m  i 

i  I  I  I  I  I  I  I  I  I  l  I  I 

i  I  I  I  p  i  i  i  i  i  i  i  i 

I  I  I  I  I  Experimental  Option 

Design  Construction  Testing 

I  I  I  I 

l  I  I  I  I  I  I  I  I  I  I  I  I 

I — 

Feb.  Apr.  May  Jul.  Aug.  Oct.  Nov.  Jan. 


Figure  1 :  SeaKey  year  2  program  schedule. 
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Section  B.  Technical  Progress 

SUMMARY 

In  this  report  we  summarize  the  technical  progress  accomplished  during  the  first  quarter 
of  the  second  year  of  the  SeaKey  program.  Our  progress  stems  from  our  year  1  work 
on  the  program  executing  tasks  1  and  2.  The  two  major  tasks  we  are  executing  this 
year,  identified  in  figure  1,  are:  (1)  designing  a  proposed  implementation  for  a  free- 
space  QKD  link  optimized  for  operation  in  a  naval  environment  and  (2)  calculating  the 
achievable  key  rate  of  the  aforementioned  QKD  link  in  realistic  environmental 
conditions. 

This  quarter  we  have  evaluated  literature  which  calculates  key  rates  of  CV  QKD 
systems,  primarily  as  a  function  of  realistic  receiver  parameters.  Subsequently,  we 
have  constructed  our  own  models  for  CV  QKD  rate  calculations,  awaiting 
parameterization  from  experimental  results  from  our  own  laboratory,  or  from  guidance 
from  ONR.  This  report  contains  a  technical  memo  from  Boulat  Bash  describing  the 
details  of  the  homodyne  receiver  model  under  construction. 

In  an  effort  to  meet  the  aggressive  key  rates  required  by  ONR  for  the  QKD  system 
under  study  our  team  continues  to  evaluate  limits  of  multi-spatial  QKD  systems,  using 
multiple  Gaussian  beams  to  provide  a  linear  increase  to  the  key  rates  achievable  in 
free-space,  when  rates  for  a  single  mode  are  limited  by  loss  and  noise.  This  report  also 
contains  a  technical  memo  from  Boulat  Bash  describing  the  details  of  the  multi-mode 
analysis  being  performed  in  collaboration  with  Jeff  Shapiro  at  MIT. 


TECHNICAL  RESULTS 


Modeling  Gaussian-modulated  coherent-state  quantum  key  distribution  using 
balanced  homodyne  detector 

Introduction 

The  rate  of  quantum  key  distribution  (QKD)  critically  depends  on  the  loss  and  noise  in 
the  system.  The  range  of  continuous-variable  (CV)  QKD  systems  is  especially  sensitive 
to  excess  noise  in  the  system.  Here  we  analyze  the  performance  of  the  CV  Gaussian- 
modulated  coherent  state  QKD  protocol  that  uses  a  practical  balanced  homodyne 
detector  (BHD).  We  build  on  the  work  in  [Chi  et  a/.]  by 

•  accurately  modeling  the  atmospheric  absorption  and  scattering, 

•  optimizing  the  modulation  power, 

•  optimizing  the  laser  repetition  rate,  and 

•  analyzing  the  impact  of  the  collective  attacks  on  the  QKD  rate. 
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We  also  rely  on  the  formulae  and  references  presented  in  [Scarani  et  al.]. 

QKD  system  performance  model 

The  QKD  rate  in  bits  per  second  of  any  QKD  system  is  expressed  as  follows: 
r=max(0,p/yAe-/SE)xft  (1) 


where  /^g  measures  the  shared  mutual  information  between  Alice  and  Bob  and  /gE 

measures  the  same  between  Bob  and  Eve.  In  practice,  the  effective  amount  of 
information  shared  between  Alice  and  Bob  is  reduced  by  error  correction  and 
reconciliation,  which  is  captured  by  factor  p<1 .  Furthermore,  /^g  and  /gE  quantify  the 

shared  information  in  bits  per  pulse.  We  thus  multiply  by  the  laser  repetition  rate  R  in 
pulses  per  second  to  obtain  the  QKD  rate  in  bits  per  second. 


The  information  measures  /^g  and  /g£  depend  on,  respectively,  Alice/Bob  and  Eve 

capabilities.  Here  we  assume  that  Alice  and  Bob  use  Gaussian-modulated  laser  light 
source  over  a  free-space  optical  channel  with  a  balanced  homodyne  receiver.  Thus,  the 
expression  for  g  is  a  familiar  Shannon  capacity  of  a  classical  additive  white  Gaussian 

noise  (AWGN)  channel: 


'aBT  2log2 


V 


1  + 


A 


1+6 


(2) 


where  V ^  is  the  Gaussian  modulation  power  in  photons  per  pulse  and  6  is  the  noise  in 

photons  per  pulse  measured  at  the  input  (thus,  noise  originating  at  various  locations 
along  the  system  is  scaled  according  to  the  gain/loss  of  the  channel  up  to  that  point). 
Noise  6  is  expressed  as  follows: 


6= 


i-nG  x  x 

+W 


5LO+5e 

nG 


(3) 


1  -nG 

where  ^  is  the  loss-induced  vacuum  noise,  6^  is  noise  from  the  imperfections 
outside  Bob’s  system,  6^  is  noise  introduced  by  the  electrical  pulse  overlap  because  of 
the  finite  response  time  of  the  BHD,  5^q  is  the  noise  associated  with  local  oscillator 
(LO)  fluctuations  in  the  presence  of  incomplete  subtraction  of  a  BHD,  and  60  is  the 
electronic  noise  at  Bob’s  homodyne  detector. 


We  consider  two  types  of  attacks  on  Alice  and  Bob’s  system  by  Eve.  First,  we  analyze 
the  individual  attack,  where  Eve  attacks  each  of  the  quantum  systems  transmitted  by 
Alice  to  Bob  independently  of  the  others,  and  measures  her  ancillas  before  classical 
post-processing.  In  this  case,  the  information  Eve  obtains  is  classical,  and  /gg  is 

expressed  as  follows  [Lodewyck  et  al.,  2005]: 
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1 BE ~  2log2 


1  +r|  G(  V^+S^+S  y)+5  i_o+5e 


n/(i +G(6A+6v+(vA+'{ )  1  -i  )+5L0/n)+i  -n+5 


.(4) 


This  model  assumes  that  Eve  controls  all  noise  sources  except  the  electronic  noise  at 
Bob’s  detector  5„. 


The  collective  attack  assumes  that  Eve  attacks  each  of  the  quantum  systems 
transmitted  by  Alice  to  Bob  independently  of  the  others  but  can  keep  her  ancillas  in  a 
quantum  memory  for  any  amount  of  time.  Thus,  Eve  potentially  has  access  to  all  the 
classical  information  encoded  in  the  quantum  states  that  she  collects.  This  is  measured 
using  the  quantum  generalization  of  the  classical  Shannon  mutual  information,  known 
as  Holevo  information,  and  is  expressed  as  follows  [Scarani  eta!..  Section  V.B.5]: 

/eE=X(S:E)=ST(A1  )+g(A2)-g(A3),  (5) 


where  g(x)=(x+1  )log2(x+1  )-xlog2x  is  the  entropy  of  a  thermal  state  with  mean  photon 

V1 

number  x  and  A^=  2  with 

*1,2  =  \  (a±  Va\2-4s)  (6) 

2  1  +  IV*(1+V.)26 

V  iTiy!  <7> 


and 

A=(1 +  VA)2^  -2qG)+2nG+[nG(1  +VA+6)]2  (8) 

B=[r\G^+b+VA5]2.  (9) 

Here  it  is  assumed  that  Eve  controls  all  noise  sources.  We  note  that  collective  attack  is 
optimal  for  Eve:  that  is,  (5)  is  the  maximum  amount  of  information  that  Eve  can  access 
in  a  CV  QKD  system  [Renner  and  Cirac], 

It  is  clear  that  the  QKD  rate  given  in  (1 )  is  a  complicated  function  of  the  modulation 
power  VA,  we  must  thus  find  the  optimal  value  of  VA  that  maximizes  the  QKD  rate.  It 

turns  out  that  the  repetition  rate  R  must  also  be  optimized,  as  the  improvement  in  bits- 
per-second  QKD  rate  comes  at  the  cost  of  increased  noise  from  the  pulse  overlap.  We 
describe  the  models  of  noise  and  loss,  and  provide  the  parameters  we  use  in  our 
calculations  next. 
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Noise  and  loss  models 

Channel,  detector,  and  coding  efficiency 

We  operate  at  the  standard  A=1 ,55pm  wavelength.  In  our  calculations  we  use  the 
formulae  for  propagation  of  a  normalized  focused  beam  in  free  space  without 
accounting  for  the  effects  of  turbulence  (analysis  of  the  impact  of  turbulence  is  on  our 
research  agenda  in  Section  V).  However,  we  model  the  atmospheric  absorption  and 
scattering  using  MODTRAN  [Berk  et  al.].  Thus,  channel  efficiency  is  expressed  as 
follows: 

G=G7*exp[-aL],  (10) 

where  exp[-aL]  is  the  attenuation  from  atmospheric  absorption  and  scattering,  and  Gj 

is  the  power  transmissivity  of  a  channel  induced  by  transmitting  a  normalized  focused 
beam  in  vacuum  from  a  circular  aperture  of  radius  rj  to  a  circular  aperture  of  radius  r ^ 

located  L  meters  away.  We  assume  r-j=rj=QA  m.  The  wavelength-dependent  extinction 

coefficient  a=0.917  is  drawn  from  MODTRAN  “Mid-Latitude  Summer  (MLS)” 
atmospheric  model  at  a  10  m  elevation  from  the  ground  level  with  23  km  visibility  in 
clear  weather.  We  obtain  Gy-  by  evaluating  [Shapiro,  (18)]  with  turbulence 

2 

strength  Cn= 0: 

Gy-Error!  (11) 

0  f  ljrRrT)2 

where  Jn(x )  is  the  n-th  order  Bessel  function  of  the  first  kind,  and  D^=  y  J  is  the 

Fresnel  number  product.  Our  error  correction  and  reconciliation  coding  efficiency  is 
(3=0.898,  corresponding  to  the  results  from  experimental  systems  [Lodewyck  et  al., 
2007],  We  use  detector  efficiency  r|=0.84  in  the  calculations  that  follow. 

Noise  models 

We  set  the  electronic  noise  and  the  noise  from  the  imperfections  outside  Bob’s  system 
to  5e=0.045  and  5^=0.056  photons  per  pulse,  respectively,  as  is  done  in  [Chi  et  al.]. 

Per  eq.  (8)  in  [Chi  et  al.],  the  excess  noise  contributed  by  the  pulse  overlap  is: 

5v=2(\/4+1)xexp  [~B2/R2],  (12) 

where  B  is  the  bandwidth  of  the  detector  and  R  is  the  laser  repetition  rate.  We  set  the 
bandwidth  of  the  detector  to  B=100  MHz.  Eqs.  (1)  and  (12)  present  a  trade-off: 
increasing  R  increases  QKD  rate  in  bits  per  second,  but  also  increases  the  noise  from 
pulse  overlap.  Therefore,  we  optimize  R,  along  with  V to  achieve  the  maximum  QKD 

rate. 
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The  noise  from  the  fluctuations  of  the  local  oscillator  (LO)  is  given  by  [Chi  et  al.,  (11)]: 


the  total  imbalance  of  the  detector.  Denote  by  the  beam  splitter  transmission  and 

reflection  coefficients  and  by  {G^  the  amplifier  gains  associated  with  two 

2  2  2  2 
photodiodes.  Assuming  ar|d  GpG ^  K~Kopt+Kel’  w*1®1"®  Kopt=t  '\~t2  anc* 


generalized  common-mode  rejection  ratio  (CMRR)  which  is  measured  in  decibels  and 
defined  by  [Chi  et  al.,  (12)]: 

CMRR=- 20log10(25).  (14) 

We  calculate  5 i_q  for  an  LO  with  power  20  mW  and  power  stability  0.1  %RMS. 

Results 

The  QKD  rate  optimized  over  modulation  power  and  repetition  rate  R  is  presented  in 
Figure  2.  We  also  plot  the  optimal  values  of  and  R  in  Figures  3  and  4,  respectively. 

Clearly,  only  guaranteeing  security  against  the  less  sophisticated  individual  attacks 
allows  greater  rate.  Also  notable  is  the  large  CMRR  (and,  correspondingly,  small  k) 
required  to  attain  positive  QKD  rate  at  longer  transmission  ranges.  We  note  that 
increasing  the  detector  efficiency  q  and  the  error  correction/reconciliation  efficiency  (3 
would  substantially  improve  the  QKD  rate. 


- <5.o=0  (Ind) 


103 

Range  (m) 
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Figure  2:  QKD  rate  optimized  over  modulation  power  and  repetition  rate  R. 
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Figure  3:  Optimal  modulation  power  V^. 
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Figure  4:  Optimal  repetition  rate  R. 
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Quantum  key  distribution  using  multiple  Gaussian  focused  beams 

Recent  proliferation  of  suggestions  on  using  OAM  modes  for  QKD  begs  a  question  of 
whether  it  is  worth  it  (i.e. ,  how  much  do  we  really  gain  after  putting  in  the  effort  to 
generate  and  separate  those  orthogonal  modes).  Here  is  the  list  of  some  recent  papers 
on  this: 

•  http://iopscience.iop.Org/1 367-2630/1 7/3/033033/article 

•  http://www.nature.com/nphoton/journal/v9/n6/full/nphoton.2015.95.html 

•  http://journals.aps.0rg/prl/abstract/IO.l  103/PhysRevLett.l  13.060503 

•  http://arxiv.org/pdf/1402.2602.pdf 

•  http://www.ncbi.nlm.nih.gov/pubmed/22714347 

•  http://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=6671930 

•  http://cpl.iphy.ac.cn/fileup/PDF/201-1422.pdf 

We  plot  some  of  our  recent  calculations  in  Figure  5.  This  does  not  include  turbulence 
yet,  and  is  done  assuming  a  discrete-variable  (decoy  state)  BB84  protocol.  The  yellow 
curve  is  a  single-spatial-mode  baseline  that  uses  one  Gaussian  laser  beam  for  QKD. 

The  red  curve  assumes  multiple  (an  optimal  number  of)  focused  beams  with  an  optimal 
choice  of  the  nearest-neighbor  overlap  between  spots  at  the  receiver  aperture  plane 
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(the  optimal  overlap  is  range  dependent),  and  an  optimal  size  and  positioning  of  the 
beam  waist  along  the  channel  length.  This  calculation  assumes  a  unity-fill  factor  single¬ 
photon  detector  array  with  each  beam  focused  at  the  center  of  one  detector  pixel.  The 
blue  curve  uses  orthogonal  (HG  or  LG)  modes,  assuming  those  spatial  modes  can  be 
modulated  and  separated  without  loss  (which  is  clearly  being  very  optimistic).  The  blue 
curve  assumes  Gaussian  (soft)  apertures,  and  the  other  two  (for  the  focused  beam 
calculations)  assume  square  apertures  of  the  same  area  as  the  soft  aperture. 


Figure  5:  The  comparison  of  the  use  of  the  multiple  Gaussian  laser  beams 
vs.  orthogonal  modes. 

The  message  from  these  results  seems  to  be: 

1 .  one  can  gain  a  potentially  between  1  to  2  orders  of  magnitude  in  key  rate  over  a 
1  km  link  by  using  multiple  focused  beams,  BUT 

2.  doing  QKD  using  OAM  modes  is  not  worth  it.  The  incremental  gain  by  using 
OAM  modes  is  relatively  small  (around  a  factor  of  7)  and  the  losses  associated  with 
generating/separating  these  modes  is  likely  to  offset  this  gain. 

In  fact,  the  performance  of  the  multiple  focussed  beam  system  (the  red  curve)  might 
improve  further  if  we  use  hexagonally-packed  beam  spots  as  opposed  to  using  a  square 
grid.  However,  we  have  not  examined  that  yet. 

We  are  currently  working  on  extending  these  results  to  turbulent  propagation  (with  and 
without  adaptive  optics).  Turbulence  will  clearly  adversely  affect  all  the  systems,  but  it  is 
not  clear  which  one  (the  multiple  focussed  beam  vs.  the  multiple  HG/LG  modes)  will  be 
affected  more. 

NEXTSTEPS 

In  the  next  quarter  we  will  be  specifically  evaluating  the  published  noise  specifications  of 
balanced  photodetector  pairs.  These  values  will  provide  the  requirements  for  LO  power 
at  the  receiver,  as  well  as  help  define  fundamental  limits  on  the  key  exchange  rate 
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achievable  [1],  Continuing  forward  we  will  include  non-idealities  that  were  identified  in 
year  1  of  the  SeaKey  program,  such  as  loss  and  turbulence  in  the  link. 

Research  agenda 

There  are  several  follow-on  modeling  tasks  on  our  research  agenda: 

1 .  Incorporate  turbulence  into  the  atmospheric  model  discussed  in  Section 
lll+.1667emA.  This  would  substantially  improve  the  applicability  of  the  model  to  naval 
communication  scenarios; 

2.  Refine  the  model  for  the  fluctuations  of  the  LO  in  Section  lll+.1667emB,  including 
potential  mitigation  of  such  fluctuation  by,  e.g.,  attenuating  one  of  the  detector  arms  to 
improve  the  balance; 

3.  Investigate  improving  QKD  rate  by  using  multiple  beams  for  CV  QKD; 

4.  Work  with  experiments  team  to  measure  characteristics  of  the  equipment 
available  in  the  laboratory  and  test  how  well  the  model  matches  reality. 


Section  C.  Problem  Areas  -  Identification 

There  are  no  anticipated  problems  or  issues  to  report  at  this  time. 
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Contract  Value  (K’s) 


Section  D.  Financial  Update 

Financial  Chart  reflecting  Year  2: 
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